Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 1:24 a.m.5 views

CVE-2022-43556

Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XSS in the text input field since the result dashboard page output is not sanitized. The Concrete CMS security team has ranked this 4.2 with CVSS v3.1 vector AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N Thanks...

6.1CVSS6.1AI score0.01853EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/15 6:9 p.m.10 views

CVE-2025-43556

Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.4AI score0.00115EPSS
Exploits0References3
NVD
NVD
added 2025/05/13 6:15 p.m.17 views

CVE-2025-43556

Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00115EPSS
Exploits0References1
OSV
OSV
added 2025/05/13 6:15 p.m.0 views

CVE-2025-43556

Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.3AI score0.00115EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/13 5:39 p.m.17 views

CVE-2025-43556 Animate | Integer Overflow or Wraparound (CWE-190)

Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00115EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/13 5:39 p.m.8 views

CVE-2025-43556 Animate | Integer Overflow or Wraparound (CWE-190)

Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00115EPSS
Exploits0References1
CVE
CVE
added 2025/05/13 5:39 p.m.50 views

CVE-2025-43556

CVE-2025-43556 concerns Adobe Animate versions 24.0.8, 23.0.11 and earlier. The issue is an Integer Overflow or Wraparound that can lead to arbitrary code execution in the user’s context; exploitation requires the user to open a malicious file. Connected sources corroborate affected versions and ...

7.8CVSS7.8AI score0.00115EPSS
Exploits0References1Affected Software1
Talos Blog
Talos Blog
added 2024/10/08 7:4 p.m.43 views

Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities

The largest Microsoft Patch Tuesday since July includes two vulnerabilities that have been exploited in the wild and three other critical issues across the company's range of hardware and software offerings. October's monthly security update from Microsoft includes fixes for 117 CVEs, the most in...

9.8CVSS10AI score0.83112EPSS
Exploits5
NVD
NVD
added 2024/10/08 6:15 p.m.11 views

CVE-2024-43556

Windows Graphics Component Elevation of Privilege Vulnerability...

7.8CVSS0.00628EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/08 5:36 p.m.15 views

CVE-2024-43556 Windows Graphics Component Elevation of Privilege Vulnerability

...

7.8CVSS0.00628EPSS
Exploits0References1
CVE
CVE
added 2024/10/08 5:36 p.m.84 views

CVE-2024-43556

CVE-2024-43556 is a Windows Graphics Component elevation-of-privilege vulnerability. Public sources confirm it affects the Windows Graphics Component and can yield elevated privileges (base CVSS v3.1 7.8). The issue is listed as a local, privilege-escalation risk; exploitation details are not pro...

7.8CVSS8.4AI score0.00628EPSS
Exploits0References1Affected Software15
Circl
Circl
added 2024/10/08 5:0 a.m.8 views

CVE-2024-43556

creationtimestamp| type| source ---|---|--- 2024-10-08 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1330/ 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review...

7.8CVSS8.7AI score0.00628EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/03 10:5 a.m.9 views

CVE-2023-43556 Buffer Copy Without Checking Size of Input in Hypervisor

Memory corruption in Hypervisor when platform information mentioned is not aligned...

9.3CVSS6.9AI score0.00055EPSS
Exploits0References1
CVE
CVE
added 2024/06/03 10:5 a.m.66 views

CVE-2023-43556

CVE-2023-43556 describes memory corruption in the Hypervisor when platform information is not aligned. The available connected documents corroborate this vulnerability across multiple sources (NVD, Red Hat CVE entry, CVE list, Vuln Enrichment) with the same description. The materials do not speci...

9.3CVSS9.4AI score0.00055EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2022/12/06 12:40 a.m.0 views

CVE-2022-43556

creationtimestamp| type| source ---|---|--- 2022-12-06 00:40:27+00:00| seen| https://t.me/cibsecurity/54034 2025-04-24 14:05:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13223...

6.1CVSS6AI score0.01853EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/12/05 12:0 a.m.3 views

CVE-2022-43556

Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XSS in the text input field since the result dashboard page output is not sanitized. The Concrete CMS security team has ranked this 4.2 with CVSS v3.1 vector AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N Thanks...

6.1AI score0.01853EPSS
Exploits0References3
CVE
CVE
added 2021/12/28 6:17 p.m.62 views

CVE-2021-43556

CVE-2021-43556 affects FATEK WinProladder: versions 3.30_24518 and earlier are vulnerable to a stack-based buffer overflow while processing project files (SPF/TAB/PDW variants, per ZDI advisories). The root cause is improper validation of the length of user-supplied data copied into a stack buffe...

7.8CVSS8AI score0.00609EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2021/12/28 6:17 p.m.18 views

CVE-2021-43556 FATEK Automation WinProladder

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00609EPSS
Exploits0References4
Rows per page
Query Builder